Spec 42: Aviation Industry Standards for Digital Information Security, Revision 2026.1

Description

Spec 42 provides recommendations on standardized methods to achieve the appropriate level of security for an application primarily relying on digital identities but in some cases transitioning from an existing manual process over time to a fully functioning automated digital identity-based solution. The intent of this guidance is to support a variety of levels of users and security requirements and guide an organization through that transition process. This revision includes the following updates:

• Added Post Quantum Cryptography (PQC) algorithms and related information
• Deprecated Appendices A-6 (Time-stamp Authority Policy) and A-7 (Reference Digital Signature Policy)
• Added section on Secure Boot Cryptographic Key Management
• Updated SHALL statements
  

Notes

Members of the ATA e-Business Program have access to this specification and all other ATA e-business specifications for free. To learn more about the cost and benefits of membership or to get involved in the standards development process, go to http://www.ataebiz.org.